Re: Requirements for CNNIC re-application

2015-05-22 Thread Eric Mill
On Fri, May 22, 2015 at 5:15 PM, Kathleen Wilson kwil...@mozilla.com wrote: On 4/7/15 5:31 PM, Richard Barnes wrote: 5. April 1, 2016 is the earliest date at which CNNIC may apply for full inclusion, so SSL certificates issued after Apr 1 2015 for new domains will be recognized. Do you

Re: Requirements for CNNIC re-application

2015-05-22 Thread Kathleen Wilson
On 4/7/15 5:31 PM, Richard Barnes wrote: As noted in our earlier conclusion with regard to CNNIC's status [1], the CNNIC roots are currently in a partially disabled state, in which certificates chaining to these roots are only to be accepted if they were issued before 1 Apr 2015. CNNIC may

Re: Name-constraining government CAs, or not

2015-05-22 Thread Gervase Markham
On 21/05/15 13:56, Peter Kurrasch wrote: ‎‎Returning to your original post, Gerv Thank you :-) So here is where the difference really lies between government and commercial CAs: control. Governments and, therefore, government CAs wield a level of control that commercial entities normally